This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
File:                     Njjfo7mFahWtnVQwa1v3BjD2NkY.mft (raw, json)
Hash identifier:          oLHGKJkT1x7s4ZlvHLRobS2CCFqzabtGGUeUbHXh6ds=
Subject key identifier:   0F:D9:2E:BF:A3:54:7D:95:49:1E:03:63:E6:02:31:0A:21:91:00:16
Authority key identifier: 36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46
Certificate issuer:       /CN=A9151932/serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
Manifest number:          17
Signing time:             Sun 25 Jan 2026 04:21:56 +0000
Manifest this update:     Sun 25 Jan 2026 04:21:55 +0000
Manifest next update:     Sun 01 Feb 2026 04:21:55 +0000
Files and hashes:         1: Njjfo7mFahWtnVQwa1v3BjD2NkY.crl (hash: xGZDxmV0xpm0s00YfLSWJt6FdkL+XMJj5KUvS3GrGwU=)
                          2: 8C622D46DF0811F0A8BEBB315D6F56BC.roa (hash: sle3VjtmMU5Kr440i5EaiPNQxmWUedMl6NxF8wN8YnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl
                          rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151932, serialNumber=3638DFA3B9856A15AD9D54306B5BF70630F63646
        Validity
            Not Before: Jan 25 04:21:55 2026 GMT
            Not After : Feb  1 04:21:55 2026 GMT
        Subject: CN=69759a64-687b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:1d:e6:1a:9b:43:be:1b:f0:0c:4c:cd:d5:
                    ff:56:66:c2:11:8d:43:50:42:d1:8b:33:71:2c:fa:
                    47:50:c7:a3:81:45:76:32:47:b7:0b:56:8c:38:72:
                    8f:80:f0:23:d4:5b:3b:db:29:9c:70:be:67:40:fb:
                    a7:25:1f:fa:d0:27:57:d4:6e:62:16:93:12:6f:39:
                    ba:a1:85:0e:76:b9:ca:4d:91:6d:be:86:5d:dd:63:
                    76:aa:ea:aa:51:6c:d8:ec:97:12:e7:07:35:74:fa:
                    57:ea:6a:f1:d7:1a:06:29:3b:1d:5d:78:bb:66:94:
                    8d:f0:39:5b:c6:b8:0e:7f:30:00:c2:ba:93:31:d1:
                    69:77:67:90:c4:b4:e6:b6:21:66:3c:59:69:b9:0f:
                    84:ee:42:61:b3:b7:84:32:42:fd:6d:81:10:0d:7a:
                    79:85:a6:ef:1e:8b:7c:b5:02:e2:3c:5a:1c:ad:bd:
                    4c:86:43:68:c7:9f:25:35:05:cc:dd:f3:72:e3:97:
                    d5:73:52:a0:bf:40:5f:39:52:0e:87:6f:9b:6e:c1:
                    c4:9a:32:25:58:fd:96:2e:87:63:5d:ee:68:89:89:
                    f5:cd:3d:28:c0:20:da:9b:90:6a:11:07:7c:3f:c0:
                    e6:22:21:f3:b5:5e:ec:c4:0c:50:2b:22:9f:9d:51:
                    7a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D9:2E:BF:A3:54:7D:95:49:1E:03:63:E6:02:31:0A:21:91:00:16
            X509v3 Authority Key Identifier:
                keyid:36:38:DF:A3:B9:85:6A:15:AD:9D:54:30:6B:5B:F7:06:30:F6:36:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Njjfo7mFahWtnVQwa1v3BjD2NkY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/2A5E8B02DC9311F0B4518961A2EE528E/Njjfo7mFahWtnVQwa1v3BjD2NkY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f2:76:35:f7:1a:cd:1a:6e:4d:55:64:5c:81:90:5c:3a:85:
         74:42:18:d7:89:1b:20:d9:0e:bd:fe:47:b9:b3:9f:d1:6b:a6:
         66:03:2e:0f:87:33:17:82:2f:a6:79:d0:6c:3a:4f:16:99:1b:
         bc:88:76:ed:b4:a9:f4:85:41:3e:bf:1d:c6:3c:80:aa:2f:33:
         e6:5b:07:69:d9:24:e2:16:de:f5:ac:cd:18:17:45:26:33:42:
         be:7a:db:fb:54:0d:c4:24:16:0e:d4:2f:a0:21:ee:d3:b1:25:
         21:30:c8:fc:0a:2c:30:54:2d:08:2a:81:92:30:65:58:6e:57:
         ab:12:8b:ea:5d:f4:5f:4a:7b:8b:fe:5f:af:9d:9c:83:b0:c2:
         a8:e1:2e:37:29:d5:e1:38:4c:19:93:82:d8:39:9d:b3:65:4c:
         de:98:5a:e1:72:a8:ef:a6:20:25:78:47:29:87:db:6f:9f:22:
         ac:e4:79:16:69:a8:8f:af:e8:44:87:d1:98:0d:b9:b7:21:01:
         c7:2f:e2:cc:65:cd:8d:12:f2:45:67:8c:0b:f5:81:76:7c:b5:
         92:3b:f9:8a:34:ef:a5:dc:c5:92:ac:28:25:9b:fd:01:ee:ae:
         c7:7c:82:ff:36:0a:15:93:03:e4:a1:10:02:04:31:bf:9f:e3:
         94:f7:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:35 2026 by rpki-client